>
> I'm not running 4500 but I'm having the same problem on the newer 4800G with 
> the latest firmware.

Thanks for letting me know, I added documentation to the 4800G modules.

> Also I don't like the MIB layout on the 3Com which requires 
> OID_hwdot1qTpFdbSetPort to scan through the whole mac address table to lookup 
> for a port. It takes more than 5 mins for OID_hwdot1qTpFdbSetPort to run in a 
> /21 network with thousands of mac-address in the table.

Argh.. you are right, the Fdb holds all the types of MACs (static, 
dynamic, etc.) so all of the L2 MACs are in there.. doh!

There's a smaller "secure" table but you can only use it if the port is 
in "port-security autolearn" so the Fdb was used instead. Maybe we can 
switch to use autolearn with forced 02:00... addresses to fill the 
learning table.

Another potential improvement: the Fdb is categorized by VLAN first so 
maybe when fetching 'secure MACs' if we query only the VLANs in 
switches.conf's vlans=... on the port first and then we fetch all MACs 
on that VLAN, this would reduce the table size. But vlans=... is set to 
disappear as it is mostly an annoyance.

I added some TODOs in the right spot in the code.

-- 
Olivier Bilodeau
[email protected]  ::  +1.514.447.4918 *115  ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

------------------------------------------------------------------------------
Benefiting from Server Virtualization: Beyond Initial Workload 
Consolidation -- Increasing the use of server virtualization is a top
priority.Virtualization can reduce costs, simplify management, and improve 
application availability and disaster protection. Learn more about boosting 
the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev
_______________________________________________
Packetfence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to